Recently, Google researchers have said there are many security holes in Apple Safari web browser that allow hackers to track usersâ browsing behavior. Interestingly, it can be done via a tool that had been designed to protect usersâ privacy.
The flaws found in an anti-tracking tool are known as Intelligent Tracking Prevention. In fact, Google reportedly disclosed these flaws to Apple last August. Last December, Apple vaguely disclosed the security breach in a blog post and thanked Google.
Also Read: Google Has Discovered Malicious Websites Targeting iPhone Users
The research team has identified five types of attacks that can occur due to vulnerabilities. According to reports, the vulnerabilities may allow third parties to obtain âsensitive private information about the userâs browsing habitsâ.
âYou would not expect privacy-enhancing technologies to introduce privacy risks,â said Lukasz Olejnik, an independent security researcher who has seen the paper. âIf exploited or used, [these vulnerabilities] would allow unsanctioned and uncontrollable user tracking.
Gizchina News of the week
âWhile today such privacy vulnerabilities are very rare, issues in mechanisms designed to improve privacy are unexpected and highly counter-intuitive.â
The Cupertino-based company rolled out Intelligent Tracking Prevention in 2017. It came with a specific aim of protecting Safari browser users from being tracked around the web by advertisersâ and other third-partiesâ cookies.
That time, it was warmly welcomed by privacy advocates as a pioneering privacy-enhancing technology for web browsers. But it also forced competitors (Google as well) to augment their own tracking controls.
Anyway, Google researchers also identified a flaw that allowed hackers to âcreate a persistent fingerprint that will follow the user around the webâ. Others were able to reveal what individual users were searching for on search engine pages.
Apple confirmed it fixed the bugs reported by Google last year.
